Skip to content
OpenAdvisories
Medium WID-SEC-2026-1630 4 CVEs

Progress Software MOVEit Automation: Mehrere Schwachstellen

Published May 20, 2026 · Updated May 20, 2026 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Progress Software MOVEit Automation ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.

Product

Progress MOVEit ist eine sichere Managed File Transfer (MFT)-Software, die Transparenz und Kontrolle über die Dateiübertragungsaktivitäten bietet.

Vulnerabilities 4

  • Medium 6.5

    Incorrect default permissions vulnerability in Progress Software MOVEit Automation

    Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

  • Medium 5.9

    Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation

    Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

  • Medium 5.3

    Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation

    Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Flooding. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

  • Medium 4.3

    Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation

    Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

Revision history

  1. #1

    Initiale Fassung

References